⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-20035 | Authenticated OS Command Injection in SonicWall SMA100 Appliances | 6.5 | 4% | KEV | KEV |
| CVE-2024-43451 | NTLMv2 Hash Disclosure Spoofing Vulnerability in Microsoft Windows | 6.5 | 84% | KEV | KEV |
| CVE-2025-1093 | The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to… | 9.8 | <1% | ||
| CVE-2025-24054 | NTLM Hash Disclosure Spoofing Vulnerability in Microsoft Windows | 5.4 | 62% | KEVPoC ×3 | KEV |
| CVE-2025-24859 | A session management vulnerability exists in Apache Roller before version 6.1.5 where active user sessions are not properly invalidated after password changes | 2.1 | 1% | ||
| CVE-2025-2492 | An improper authentication control vulnerability exists in AiCloud | 9.2 | 1% | ||
CVE-2025-31200+1 related CVE | Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution | 9.8 | 21% | KEVPoC ×2 | KEV |
| CVE-2025-32433 | Unauthenticated RCE in Erlang/OTP SSH Server | 10.0 | 99% | KEVPoC ×2 | KEV |
| CVE-2025-3278 | The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.4 | 9.8 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | breachforums.st | the site on its Telegram channel, alongside BreachForums ("breachforums[.]st"). One 4chan janitor told TechCrunch that they are "confi |
| domain | cracked.io | domain over two months after its earlier version hosted on "cracked[.]io" was seized in a joint law enforcement operation. Android |
| domain | cracked.sh | crime forum Cracked.io has resumed operations under the new cracked[.]sh domain over two months after its earlier version hosted o |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Apr 21, 2025 Cybersecurity / Hacking News Can a harmless click really lead to a full-blown cyberattack? Surprisingly, yes — and that’s exactly what we saw in last week’s activity. Hackers are getting better at hiding inside everyday actions: opening a file, running a project, or logging in like normal.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.